CVE-2026-110390mediumCWE-306CWE-497

CVE-2026-110390: medium-severity vulnerability in Flexera FlexNet Beacon

FlexNet Beacon Missing Authentication Vulnerability

Published

Follow this CVE+ Monitor FlexNet Manager Suite+ Monitor FlexNet Beacon

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.9epss 0.4%
Missing authentication in the FlexNet Beacon component of Flexera One and FlexNet Manager Suite allows unauthenticated remote attackers to obtain Beacon policy and targeting information when anonymous web server access is enabled (the default).
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Flexera · FlexNet BeaconFlexera · FlexNet Manager Suite
Related CVEs — Flexera FlexNet Beacon

In the same product, most dangerous first.

CVE-2026-4027HIGHFlexNet Manager Suite Attachment File DisclosureEPSS 0.4%CVE-2026-4026HIGHFlexNet Manager Suite Privilege Escalation VulnerabilityEPSS 0.4%